The SAMA Cyber Security Framework (CSF) is a regulatory requirement mandated by the Saudi Arabian Monetary Authority (SAMA), released on May 24, 2017, to mandate strong cyber resilience within the financial sector in the Kingdom. The framework mandates that all commercial banks, fintech companies, and insurance companies regulated under SAMA must attain at least Maturity Level 3 through 96 controls in four domains, namely, leadership, risk management, technology operations, and third-party security. As per the recent updates to the framework, the SAMA CSF has evolved from assertion-based compliance to stringent assurance-based compliance, giving significant emphasis to supply chain security, senior management oversight, and alignment with NCA regulations.
Spotted something wrong, missing or worth adding? Tell our editors. Every submission
is reviewed and verified against its source before anything changes — nothing you send appears on the
site automatically.
Thank you — our editors will review this
Your suggestion has been received. Contributions from practitioners keep these profiles accurate. Nothing appears on the site until an editor has verified it against its source.
